Resume screener

1nika: v12workflow:3  id: resume-screener4  description: "glob CVs → local-model rubric per candidate → deterministic shortlist"5​6model: ollama/qwen3.5:4b   # PII stays on the machine · the whole screen is offline7​8const:9  role: "Senior Rust engineer"10  shortlist_size: 511  # The committed rehearsal inbox. Point this at ./hiring/inbox (or wherever12  # your exports land) and change `permits.fs.read` to match, same edit.13  cv_glob: "./examples/fixtures/cvs/*.md"14​15⛨permits:16  ⛨tools: ["nika:glob", "nika:jq", "nika:read", "nika:write"]17  # NO `net:` category. That absence is the whole sovereignty claim: with no18  # host granted, a CV that talks the model into exfiltrating itself still19  # has nowhere to go — the boundary refuses before the request is made.20  ⛨fs:21    # TWO entries, and both earn their place. `nika:glob` opens the ROOT of22    # its pattern before it lists anything, and a directory grant does not23    # cover its children while a child grant does not cover the directory —24    # so each is named. Measured: with only the second line, the run dies25    # `NIKA-SEC-004 · ./examples/…/cvs resolves outside permits.fs.read`26    # before a single CV is read.27    #28    # `*` is one segment and never crosses `/`, which is the right width29    # here: CVs land flat in the inbox. `cvs/**` would also work and would30    # additionally hand over every sub-tree someone drops in there.31    ⛨read:32      - "./examples/fixtures/cvs"      # the directory the glob opens33      - "./examples/fixtures/cvs/*"    # the CVs one level inside it34    # One brief, one path. Nothing else on this machine is writable by this35    # workflow — not `./hiring/**`, not a sibling of the brief.36    ⛨write: ["./hiring/shortlist-brief.md"]37​38tasks:39  # ── the pool is discovered at runtime · the count is never written down ──40  pool:41    ◆invoke:42      tool: "nika:glob"43      args: { pattern: "${{ const.cv_glob }}" }44​45  cvs:46    with:47      paths: ${{ tasks.pool.output }}48    for_each: ${{ with.paths }}49    max_parallel: 850    fail_fast: false                   # one unreadable CV must not stop the batch51    on_error:52      recover: null                    # null holds the index so the zip below stays aligned53    ◆invoke:54      tool: "nika:read"55      args: { path: "${{ item }}" }56​57  # A for_each output is an array in ITEM ORDER, so `transpose` pairs each58  # path with its own text. The `select` is where the unreadable CVs leave.59  pairs:60    with:61      paths: ${{ tasks.pool.output }}62      texts: ${{ tasks.cvs.output }}63    ◆invoke:64      tool: "nika:jq"65      args:66        input: ["${{ with.paths }}", "${{ with.texts }}"]67        expression: >-68          transpose69          | map(select(.[1] != null))70          | map({ path: .[0], text: .[1] })71​72  # ── one rubric, applied identically to everyone ────────────────────73  # `with.cv_path` reads `${{ item.path }}` — a pre-fan-out import that is74  # re-evaluated per iteration, which is how a loop-local reaches the prompt75  # under a name that means something.76  screened:77    with:78      pairs: ${{ tasks.pairs.output }}79      cv_path: ${{ item.path }}80    for_each: ${{ with.pairs }}81    max_parallel: 2                    # a local model shares one GPU · don't thrash it82    fail_fast: false83    on_error:84      recover: null85    ◇infer:86      max_tokens: 1200                 # a rubric row, not an essay87      prompt: |88        Role · ${{ const.role }}89        Candidate file · ${{ with.cv_path }}90        CV ·91        ${{ item.text }}92        Score this candidate against the role. Quote evidence from the CV93        for every rating: no rating without a quote.94      # `additionalProperties: false` on EVERY object node — the top level and95      # each nested one. Without it a provider is free to add keys, and the96      # jq below would be sorting a shape that changes between runs.97      schema:98        type: object99        additionalProperties: false100        required: [file, fit, strengths, concerns]101        properties:102          file: { type: string }103          fit: { type: string, enum: [strong, possible, weak] }104          years_relevant: { type: integer }105          strengths: { type: array, items: { type: string } }106          concerns: { type: array, items: { type: string } }107​108  # ── the model judged · jq decides ──────────────────────────────────109  # Ranking lives HERE, not in a prompt, so the order is reproducible: same110  # scores in, same order out. `.fit != "strong"` sorts false (0) before true111  # (1), which puts the strong candidates first; `// 0` covers the candidates112  # whose CV never stated a number.113  ranked:114    with:115      screened: ${{ tasks.screened.output }}116    ◆invoke:117      tool: "nika:jq"118      args:119        input: "${{ with.screened }}"120        expression: >-121          map(select(. != null))122          | map(select(.fit != "weak"))123          | sort_by(.fit != "strong", -(.years_relevant // 0))124​125  shortlist:126    with:127      ranked: ${{ tasks.ranked.output }}128    ◆invoke:129      tool: "nika:jq"130      args:131        input: "${{ with.ranked }}"132        expression: ".[:${{ const.shortlist_size }}]"133​134  brief:135    with:136      shortlist: ${{ tasks.shortlist.output }}137    when: ${{ size(with.shortlist) > 0 }}   # nobody cleared the bar · spend nothing138    ◇infer:139      max_tokens: 2000140      prompt: |141        Write the screening brief for these shortlisted candidates ·142        ${{ with.shortlist }}143        One paragraph each · lead with the evidence quotes · end with the144        suggested interview focus.145​146  save:147    with:148      brief: ${{ tasks.brief.output }}149    when: ${{ with.brief != null }}    # a skipped task reads null downstream · gate on the VALUE150    ◆invoke:151      tool: "nika:write"152      args:153        path: "./hiring/shortlist-brief.md"154        content: "${{ with.brief }}"155        create_dirs: true156​157outputs:158  ranked:159    value: ${{ tasks.ranked.output }}160    description: "Everyone who was not scored weak · strong first, then by relevant years"161  shortlist:162    value: ${{ tasks.shortlist.output }}163    description: "The top `const.shortlist_size` of the ranking · what the brief covers"164​